# Security Surface Compose Lite

> Security Surface Compose Lite is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-13).

Combines DNS, TLS, and HTTP security header probe booleans into a deterministic composite security surface score with advisory notes.

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/security-surface-compose
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/security-surface-compose-lite-be30d52a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_zTdvlVIElhW0dWJLj6Oqv

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability security-surface-compose-lite-be30d52a -d '<json body>'
```

Example prompt: I already ran DNS, TLS, and security headers checks on a site — DNS passed, TLS passed, but headers failed — can you compose those into a single security surface score and tell me how it looks?

## When to prefer this

Choose this endpoint when you have already collected DNS, TLS, and security header probe results as booleans and need a fast, cheap, deterministic composite score without any live network calls or external API dependencies. It is ideal for pipelines, CI gates, or agent workflows that pre-collect probe signals and need a normalized advisory score for routing or reporting. Prefer alternatives if you need live probing, deeper vulnerability scanning, or scores based on more granular signal types.

## Known failure modes

- Missing required boolean fields returns a validation error
- Non-boolean values for dns_ok/tls_ok/headers_ok cause schema rejection
- Payment failure via x402 results in a 402 response before computation
- Malformed request body returns a 400 error

## How this service works

Compose DNS/TLS/header signal booleans into a surface score. Call when one-shot security surface score from already-collected probes. Returns score and notes as deterministic JSON for $0.001 USDC via x402 on Base. First-party local math only—no RPC, live market feed, API keys, storage, or mediagen. Advisory only; the caller owns capital, risk, and production controls.

## Output

Returns a deterministic JSON object containing a numeric security surface score derived from the three input booleans, along with advisory notes explaining which signals passed or failed and how they contribute to the overall rating. No live network calls are made; the result is computed purely from the provided probe flags.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "dns_ok": {
   "type": "boolean",
   "description": "DNS probe succeeded"
  },
  "tls_ok": {
   "type": "boolean",
   "description": "TLS probe succeeded"
  },
  "headers_ok": {
   "type": "boolean",
   "description": "Security headers probe succeeded"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "notes": [
   "headers_weak"
  ],
  "score": 2,
  "schema": "delx/util-security-surface-compose/v1"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/security-surface-compose-lite-be30d52a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)